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Amendments to the claims: 

1 . (original) A method of providing services from a service provider to a plurality of 
independent entities, the method comprising: 

facilitating, on a first set of one or more servers of said service provider, a first set of 
services that require said first set of one or more servers to trust said independent entities; 

facilitating, on a second set of one or more servers of said service provider, a second set of 
services that require said independent entities to trust said second set of one or more servers; and 

providing said first and second set of services to said independent entities. 

2. (previously presented) The method of claim 1 wherein a trust is established so that 
said first set of servers trusts said second set of servers. 

3. (previously presented) The method of claim 2 wherein said first set of servers 
provides data services and wherein said second set of servers provides management and 
configuration services. 

4. (original) The method of claim 3 wherein each of said independent entities is 
organized as a single forest. 

5. (original) The method of claims 3 or 4 wherein each of said entities is organized as 
a single domain. 

6. (original) The method of claim 3 wherein at least one of said independent entities 
is embodied as a forest of computers that spans multiple customer sites. 

7. (original) The method of claim 1 wherein said first set of services comprises at least 
one of the following: virus protection services, remote access, backup, software sharing, and 
telephony services, and wherein said second set of services comprises at least one of the following: 
security, password management, software update, software distribution, access control. 

8. (previously presented) A system for providing computer services to a plurality of 
remotely located computers, the system comprising: 

a service forest for providing data services to said remotely located computers, said data 
services requiring said service forest to trust said computers; 

a management and configuration forest for providing management and 
configuration services to said remotely located computers, said management and configuration 
services requiring said computers to trust said management and configuration forest; 

said management and configuration forest and said service forest being separate 
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from each other. 

9. (original) The system of claim 8 wherein said remotely located computers are 
arranged into plural domains, and wherein each of said plural domains is associated with a 
separate customer. 

10. (original) The apparatus of claim 9 wherein said remotely located computers are 
arranged into forests, and wherein at least one forest spans multiple customers. 

1 1 . (Previously presented) A network of computers comprising a service forest of 
computers that trusts and provides services to a plurality of independent remotely located user 
computers, wherein the user computers trust and are managed and configured by a management 
forest of computers, and wherein the service forest is separate from the management forest. 

12. (original) The network of claim 1 1 wherein computers within said service forest 
implement telephony functions and email services for plural ones of said remotely located 
computers. 

13. (previously presented) The network of claim 1 1 wherein computers in said 
management forest implement security and password management, software updating and 
distribution, and configuration and management for plural ones of said remotely located 
computers. 

14. (previously presented) A computer service center comprising plural computers that 
implement services to numerous remotely located computers, and wherein computers 
implementing services that require said remotely located computers to trust said service center are 
separate from computers implementing services requiring said service center to trust said 
remotely located computers, thereby avoiding any two way trusts. 

15. (original) The service center of claim 14 wherein said remotely located computers 
are arranged into groups, each group communicating on a local area network and being associated 
with an independent entity. 

1 6. (previously presented) The computer service center of claim 1 5 wherein computers 
in the service forest communicate with a telephone network. 

17. (original) The computer service center of claim 16 wherein computers in the 
service forest communicate with the data network. 

18. (original) The computer service center of claim 16 wherein computers in the 
service forest provide data backup services for said remotely located user computers. 
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19. (previously presented) A method of providing computer services to plural 
remote customers comprising the steps of: 

classifying services to be provided to such customers as either services 
requiring customers to trust a service provider, or services requiring the service provider to trust 
said customers; and 

in response to said step of classifying, determining from what computer or 
group of computers to provide said services; 

wherein said computer or computers providing said services requiring 
customers to trust said service provider are separate from said computer or computers providing 
said services requiring the service provider to trust customers. 

20. (original) The method of claim 19 wherein said classifying comprises 
classifying into either configuration/management functions and data services functions. 

21 . (original) The method of claim 20 wherein said services are provided from plural 
computers. 

22. (previously presented) A method of providing services to a plurality of serviced entities 
from a service provider, the method comprising: 

defining a one way relationship; 

separating a first type of services wherein said relationship runs from the service provider to 
the serviced entity from a second type of services wherein the relationship runs from the serviced 
entity to the service provider, and separately implementing said first and second types of services, 
wherein said one way relationship is a trust. 

23. (original) The method of claim 22 wherein the first and second types of services are 
implemented on separate computers. 

24. (cancelled) 

25. (original) The method of claim 23 wherein said relationship also runs from computers 
providing said first type of services to computers providing said second type of services. 

26. (original) The method of claim 25 wherein at least one computer providing said first type 
of services or said second type of services is connected to a public data network. 

27. (previously presented) Apparatus for providing services to plural devices, said apparatus 
comprising: 

plural devices to be serviced; 
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a first set of servers for providing a first set of services to said devices, said first set of servers 
having a one way predetermined relationship with said devices to be serviced; a second set of servers 
for providing a second set of services to said devices, said devices having said one way relationship 
with said second set of services, wherein said one way predetermined relationship is a trust. 

28. (cancelled) 

29. (previously presented) Apparatus of claim 27 wherein said devices are customer 
computers, and wherein said service provider is a remoter IT services provider. 

30. (original) Apparatus of claim 29 wherein said devices are organized into 

multiple independent forests, and wherein said first and second sets of servers are also each organized 
into a separate forest. 

3 1 . (previously presented) Apparatus of claim 30 wherein said first and second set 
of servers also have said one way relationship between said first and second sets of servers. 

32. (previously presented) The method of claim 1 wherein said second set of servers 
do not trust said first set of servers while said first set of servers trust said second set of servers. 

33. (previously presented) The system of claim 8 wherein said management and 
configuration forest does not trust said service forest while said service forest trusts said management 
and configuration forest. 

34. (previously presented) The network of claim 1 1 wherein said management 
forest does not trust said service forest while said service forest trusts said management forest. 

35. (previously presented) The computer service center of claim 14 wherein said 
computers implementing services that require said remotely located computers to trust said service 
center do not trust said computers implementing services requiring said service center to trust said 
remotely located computers, while said computers implementing services requiring said service 
center to trust said remotely located computers trust said computers implementing services that 
require said remotely located computers to trust said service center. 

36. (previously presented) The method of claim 19 wherein said computer or computers 
implementing said services requiring said customers to trust said service provider do not trust said 
computer or computers implementing said services requiring said service provider to trust said 
customers, while said computer or computers implementing said services requiring said service 
provider to trust said customers trust said computer or computers implementing said services 
requiring said customers to trust said service provider. 
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37. (previously presented) The method of claim 23 wherein said relationship runs from said 
computers implementing said first type of services to said computers implementing said second type 
of services, but does not run from said computers implementing said second type of services to said 
computers implementing said first type of services. 

38. (previously presented) Apparatus of claim 27 wherein said second set of servers does 
not have said one way relationship with said first set of servers, while said first set of servers has said 
one way relationship with said second set of servers. 

39. (new) A method comprising: 

facilitating, on a first set of one or more servers of said service provider, a first set of 
services that require said first set of one or more servers to allow one or more client computers to 
securely access resources in said first set of one or more servers; 

facilitating, on a second set of one or more servers of said service provider, a second set of 
services that require said one or more client computers to allow said second set of one or more 
servers to securely access resources in said one or more client computers; and 

providing said first and second set of services to said one or more client computers. 
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